CVE-2023-3936

CVE-2023-3936 is a Reflected Cross-Site Scripting (XSS) vulnerability affecting the Blog2Social WordPress plugin prior to version 7.2.1. This flaw allows an attacker to inject malicious scripts due to improper sanitization of a parameter, potentially impacting high-privilege users like administrators. Rated Medium severity with a CVSS score of 6.1, it requires user interaction but has low attack complexity, leading to potential information disclosure and integrity compromise. While there is no evidence of active exploitation or KEV listing, Nuclei templates exist for detection, and there is minimal community discussion or media coverage.